{"metadata": {"vulnerability": "CVE-2026-63079", "count": 10, "kinds": {"milestone": 3, "sighting": 2, "kev": 0, "other": 5}, "linked_omitted": 0}, "data": [{"timestamp": "2026-07-15T15:45:44.599Z", "date_only": false, "value": "2026-07-15T15:45:44.599Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-63079", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-13T00:00:00Z", "date_only": false, "value": "2026-11-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-63079", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-13T15:19:20.082Z", "date_only": false, "value": "2026-11-13T15:19:20.082Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-63079", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-13T15:20:01.028Z", "date_only": false, "value": "2026-11-13T15:20:01.028Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-63079", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-13T15:20:01.028Z", "date_only": false, "value": "2026-11-13T15:20:01.028Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-63079", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-13T15:39:38.336Z", "date_only": false, "value": "2026-11-13T15:39:38.336578Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117609881783254509", "record": "CVE-2026-63079", "field": "creation_timestamp", "uuid": "5cf9844f-439d-4245-a317-d8f9636e2c03", "content": "CVE-2026-63079 RBH Integra32 5.1.11 .NET Remoting Deserialization RCE RBH Access Technologies Integra32 Security Management System 5.1.11 R5.0 contains an unauthenticated deserialization vulnerability in its deprecated .NET Remoting service, exposed on TCP port 2001 via the AxcvcLt.dll library using BinaryServerFormatterSinkProvider at TypeFilterLevel.Full without requiring authentication. A remote unauthenticated attacker can send a malicious serialized gadget payload (such as a ysoserial.net TypeConfuseDelegate chain) to the IntegraURI object endpoint, or exploit MarshalByRefObject/MarshalByValue unmarshalling for arbitrary file read/write and SMB/NTLMv2 credential coercion, to achieve remote code execution as NT AUTHORITY\\SYSTEM and fully compromise the host.\nhttps://www.cve.org/CVERecord?id=CVE-2026-63079https://gist.github.com/VAMorales/b981c0062a9a7e8942439f97246669b6https://rbh-access.com/software/integra32/https://www.vulncheck.com/advisories/rbh-integra32-net-remoting-deserialization-rce#RBHAccessTechnologies #Integra32SecurityManagementSystem#CVE_2026_63079#bot", "url": "https://infosec.exchange/users/cve/statuses/117609881783254509"}, {"timestamp": "2026-11-13T16:19:30Z", "date_only": false, "value": "2026-11-13T16:19:30Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9WVH-RC97-46VQ", "record": "GHSA-9WVH-RC97-46VQ", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-13T16:30:03.540Z", "date_only": false, "value": "2026-11-13T16:30:03.540205Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3n27fse7u7l2u", "record": "CVE-2026-63079", "field": "creation_timestamp", "uuid": "a339102f-9484-4c87-90c1-c332639fc088", "content": "CVE-2026-63079 - integra32 security management system\nThe Integra32 Security Management System version 5.1.11 contains a flaw in an old remote communication feature that lets anyone on the network send specially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rbhaccess #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3n27fse7u7l2u"}, {"timestamp": "2026-11-13T18:32:29Z", "date_only": false, "value": "2026-11-13T18:32:29Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9WVH-RC97-46VQ", "record": "GHSA-9WVH-RC97-46VQ", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-13T18:32:29Z", "date_only": false, "value": "2026-11-13T18:32:29Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9WVH-RC97-46VQ", "record": "GHSA-9WVH-RC97-46VQ", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-13T21:20:26.064Z", "anchors": {"origin": {"timestamp": "2026-11-13T00:00:00Z", "date_only": false, "value": "2026-11-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-63079", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-13T00:00:00Z", "date_only": false, "value": "2026-11-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-63079", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 76826.064061, "hours": 21.340573350277776, "days": 0.8891905562615741, "min_seconds": 0.0, "max_seconds": 76826.064061, "approximate": true, "ongoing": true, "order_known": false, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-13T00:00:00Z", "date_only": false, "value": "2026-11-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-63079", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-13T21:20:26.064Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}
